This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa File: 795bae65-e494-4497-8c64-6c78c5a4b388.roa (raw, json) Hash identifier: ozJ3+Y54JqZLLl9m3k7YpO674nNe2FNlkvBicImr6XI= Subject key identifier: 69:01:62:97:78:94:9D:41:BE:6A:0E:79:54:02:55:84:9C:4B:7F:76 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 2F83203AD5E6B296D544DFDE63A14573A6322CC8 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa Signing time: Sun 16 Nov 2025 01:00:21 +0000 ROA not before: Sun 16 Nov 2025 01:00:21 +0000 ROA not after: Sun 21 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 51.0.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:83:20:3a:d5:e6:b2:96:d5:44:df:de:63:a1:45:73:a6:32:2c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 16 01:00:21 2025 GMT Not After : Dec 21 23:59:59 2025 GMT Subject: serialNumber=435092c351e483f8f7dfe785312127d7f8e24cc40edbdfc35239f560c05a077b, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:40:10:c3:9e:75:c7:98:20:ab:40:47:66: cc:04:82:9a:1e:45:20:44:31:1c:bb:06:e9:42:f0: 9b:ec:7b:8d:0a:a6:cc:f4:76:b6:66:4e:cd:61:25: 3a:7f:74:51:5d:5d:ee:1c:60:4e:2a:ef:b6:0b:af: 13:6f:28:cb:58:8e:04:eb:ef:48:db:7c:23:89:9a: 75:a1:d7:59:6f:1a:00:c4:35:33:ab:fb:ef:18:44: 77:94:c8:31:ec:31:d9:4a:85:1c:ab:5d:ce:08:6e: 12:26:a8:a5:79:7f:3f:c9:b3:4f:84:1b:21:49:c3: c2:c4:73:b2:03:dc:83:e5:2c:a3:cd:fe:ff:38:57: 80:8c:ef:82:5a:72:f2:7a:cf:07:a2:47:c6:59:de: 7e:a1:e8:5a:f5:67:b0:91:08:c3:2b:19:32:7b:d8: e6:d5:c7:29:60:6f:f4:85:ee:e8:65:d1:43:b9:7e: a9:f8:76:2c:a0:bf:cc:4a:a9:e0:33:c7:bd:e2:ed: 24:52:6b:c6:c9:28:09:22:00:25:c5:89:38:84:8e: f4:f6:0a:2e:9d:03:4c:44:16:4f:08:29:45:bb:a8: 9f:2d:1e:a9:dc:92:3d:8a:cc:06:d5:1e:ed:97:03: 64:88:03:79:11:fd:e5:5a:d5:21:e5:a9:0b:d6:79: 6b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:01:62:97:78:94:9D:41:BE:6A:0E:79:54:02:55:84:9C:4B:7F:76 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.0.104.0/21 Signature Algorithm: sha256WithRSAEncryption 19:54:4f:2a:de:a3:ac:6f:68:08:24:ec:22:84:57:74:f4:3d: 85:e4:e9:0c:1f:27:d5:dd:2e:21:42:4f:ae:0f:05:2e:84:e2: f3:ce:69:0d:5b:6b:80:52:20:7d:8b:81:8d:cc:26:ce:07:f0: 1c:ab:f2:2f:27:d1:50:75:9a:15:4d:61:8c:96:f4:cc:da:ec: a5:bd:e6:77:ed:bf:a5:79:6d:ae:b1:75:29:82:ed:7e:50:37: 45:9b:5b:6f:12:42:4a:b3:70:29:ef:1f:b7:c0:51:ef:4d:11: 3b:3c:12:ed:e0:7f:a8:5b:c5:26:c2:cf:bb:7d:3a:60:6a:dc: a8:c1:e6:03:d7:42:d1:67:e6:5f:c0:e7:12:71:4b:d6:22:3a: 66:4b:fd:b4:d6:91:4c:9a:9b:a7:b2:dc:68:e9:07:0c:fb:a9: 4f:11:d5:8f:0b:25:8f:63:01:22:16:05:ba:c1:e3:04:49:18: c2:36:ab:18:05:54:8f:42:5c:5d:ab:9d:47:d8:e8:af:ff:74: 51:8c:87:6e:b7:ee:f5:a8:57:5e:e2:f7:39:3b:6a:e2:bc:45: 13:4e:2c:24:fd:55:f9:04:59:e3:af:0a:18:9b:a6:54:c7:12: e4:2f:37:7e:d9:bd:6a:2c:f7:5b:30:b0:4e:36:b9:14:91:8c: 1d:b3:22:31 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUL4MgOtXmspbVRN/eY6FFc6YyLMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTYwMTAwMjFaFw0yNTEyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQDQzNTA5MmMzNTFlNDgzZjhmN2RmZTc4NTMxMjEyN2Q3ZjhlMjRjYzQwZWRi ZGZjMzUyMzlmNTYwYzA1YTA3N2IxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvHQBDDnnXHmCCrQEdmzASCmh5FIEQxHLsG6ULwm+x7jQqmzPR2tmZOzWEl On90UV1d7hxgTirvtguvE28oy1iOBOvvSNt8I4madaHXWW8aAMQ1M6v77xhEd5TI Mewx2UqFHKtdzghuEiaopXl/P8mzT4QbIUnDwsRzsgPcg+Uso83+/zhXgIzvglpy 8nrPB6JHxlnefqHoWvVnsJEIwysZMnvY5tXHKWBv9IXu6GXRQ7l+qfh2LKC/zEqp 4DPHveLtJFJrxskoCSIAJcWJOISO9PYKLp0DTEQWTwgpRbuony0eqdySPYrMBtUe 7ZcDZIgDeRH95VrVIeWpC9Z5a5ECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRpAWKX eJSdQb5qDnlUAlWEnEt/djAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv Nzk1YmFlNjUtZTQ5NC00NDk3LThjNjQtNmM3OGM1YTRiMzg4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAzMAaDAN BgkqhkiG9w0BAQsFAAOCAQEAGVRPKt6jrG9oCCTsIoRXdPQ9heTpDB8n1d0uIUJP rg8FLoTi885pDVtrgFIgfYuBjcwmzgfwHKvyLyfRUHWaFU1hjJb0zNrspb3md+2/ pXltrrF1KYLtflA3RZtbbxJCSrNwKe8ft8BR700ROzwS7eB/qFvFJsLPu306YGrc qMHmA9dC0WfmX8DnEnFL1iI6Zkv9tNaRTJqbp7LcaOkHDPupTxHVjwslj2MBIhYF usHjBEkYwjarGAVUj0JcXaudR9jor/90UYyHbrfu9ahXXuL3OTtq4rxFE04sJP1V +QRZ468KGJumVMcS5C83ftm9aiz3WzCwTja5FJGMHbMiMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:55 2025 by rpki-client